Static task
static1
Behavioral task
behavioral1
Sample
NEAS.bd3f8601d164fd077a4258c6b567cc10.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.bd3f8601d164fd077a4258c6b567cc10.exe
Resource
win10v2004-20231023-en
General
-
Target
NEAS.bd3f8601d164fd077a4258c6b567cc10.exe
-
Size
311KB
-
MD5
bd3f8601d164fd077a4258c6b567cc10
-
SHA1
00fcd5e5dc7fb796d4352795a08e17b2e6e0e539
-
SHA256
ef9878209e17599f0b5e1bf719f3b94940d6925f47663aa60fd26f0b707c72fd
-
SHA512
19bd0dafce1f48100bfe5f8c5e3fc9537eb8d07d7759629779cbfdf643aa703eb31c23d409d57dbc0e8a38228f904aff3b8dacd62d87ccaad69907212a9ce544
-
SSDEEP
3072:B0IXPBdbTvuNGU/0dtXG9f+cJAiQ2I/HKlSITuYwo0r5bUjzwpnNRzLn8clIn:3XPXvu4k0X6llQ2I/U/Tzx0r9UjuP0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.bd3f8601d164fd077a4258c6b567cc10.exe
Files
-
NEAS.bd3f8601d164fd077a4258c6b567cc10.exe.exe windows:5 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 39.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ